Principal Active Directory Architect

At CVS Health, we're building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care.

As the nation's leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues - caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate. And we do it all with heart, each and every day.

As the Principal AD Architect on our team, you will work in a large enterprise, multi-domain Active Directory environment. You will lead the design, implementation, and evolution of our enterprise Active Directory infrastructure. You'll be responsible for ensuring secure, scalable, and highly available identity and access management solutions that align with organizational goals. This role involves collaborating across IT and security teams to drive modernization efforts, integrate cloud and hybrid environments, and establish governance and best practices for directory services.

You will need to have an expert knowledge and highly proficient skills in administrations of Active Directory, Azure, and Azure AD environments. You will also collaborate with other IT support teams and project teams.

We are looking for a colleague with expert knowledge of Windows operating systems along with experience using monitoring tools like Splunk and Microsoft Operations Center for operational support.

Required Qualifications:

• 10+ years of experience in designing, implementing, and managing enterprise-scale multi-domain Active Directory
• 10+ years of experience in AD DS, Group Policy, DNS, DHCP, and related identity services
• 10+ years of experience administering Azure and Azure AD
• 10+ years of experience with monitoring tools like Splunk and Microsoft Operations Center
• 10+ years of AD risk analysis with emphasis on PCI/SOC/PII/PHI auditing and remediation
• 5+ years of experience in scripting and automation using PowerShell, Bash, Python, etc.

Preferred Qualifications:

• Strong understanding of Active Directory security including best practices, privileged access management, AD hardening, delegated access, GPO, and troubleshooting
• Strong understanding of authentication protocols (Kerberos, NTLM, SAML, OAuth, etc.) and identity governance
• Experience with AD migrations, consolidations, and domain restructuring in complex environments
• Strong understanding of vulnerability management and security baseline tools
• Excellent communication and leadership skills, with the ability to influence technical direction across teams
• Excellent communication and leadership skills, with the ability to influence technical direction across teams
• Strong independent analytical and troubleshooting skills, with the ability to diagnose complex issues across Active Directory and related systems, and drive resolution with minimal supervision
• Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate or equivalent

Education:

• Bachelor's degree or equivalent experience (High School Diploma and 4 years relevant experience)

Pay Range

The typical pay range for this role is:

$144,200.00 - $288,400.00

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company's equity award program.

Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.

Great benefits for great people

We take pride in our comprehensive and competitive mix of pay and benefits - investing in the physical, emotional and financial wellness of our colleagues and their families to help them be the healthiest they can be. In addition to our competitive wages, our great benefits include:

• Affordable medical plan options, a 401(k) plan (including matching company contributions), and an employee stock purchase plan.

• No-cost programs for all colleagues including wellness screenings, tobacco cessation and weight management programs, confidential counseling and financial coaching.

• Benefit solutions that address the different needs and preferences of our colleagues including paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access and many other benefits depending on eligibility.

For more information, visit

We anticipate the application window for this opening will close on: 08/22/2025

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.